Class: Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
- Inherits:
-
Object
- Object
- Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- lib/google/apis/dlp_v2/classes.rb,
lib/google/apis/dlp_v2/representations.rb,
lib/google/apis/dlp_v2/representations.rb
Overview
Replaces an identifier with a surrogate using Format Preserving Encryption (
FPE) with the FFX mode of operation; however when used in the
ReidentifyContent
API method, it serves the opposite function by reversing
the surrogate back into the original identifier. The identifier must be
encoded as ASCII. For a given crypto key and context, the same identifier will
be replaced with the same surrogate. Identifiers must be at least two
characters long. In the case that the identifier is the empty string, it will
be skipped. See https://cloud.google.com/sensitive-data-protection/docs/
pseudonymization to learn more. Note: We recommend using
CryptoDeterministicConfig for all use cases which do not require preserving
the input alphabet space and size, plus warrant referential integrity.
Instance Attribute Summary collapse
-
#common_alphabet ⇒ String
Common alphabets.
-
#context ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2FieldId
General identifier of a data field in a storage service.
-
#crypto_key ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK. Corresponds to the JSON property
cryptoKey
. -
#custom_alphabet ⇒ String
This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports.
-
#radix ⇒ Fixnum
The native way to select the alphabet.
-
#surrogate_info_type ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2InfoType
Type of information detected by the API.
Instance Method Summary collapse
-
#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
constructor
A new instance of GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
Returns a new instance of GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig.
2155 2156 2157 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2155 def initialize(**args) update!(**args) end |
Instance Attribute Details
#common_alphabet ⇒ String
Common alphabets.
Corresponds to the JSON property commonAlphabet
2119 2120 2121 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2119 def common_alphabet @common_alphabet end |
#context ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2FieldId
General identifier of a data field in a storage service.
Corresponds to the JSON property context
2124 2125 2126 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2124 def context @context end |
#crypto_key ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK)
stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to
wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to
ensure an attacker cannot unwrap the DEK.
Corresponds to the JSON property cryptoKey
2132 2133 2134 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2132 def crypto_key @crypto_key end |
#custom_alphabet ⇒ String
This is supported by mapping these to the alphanumeric characters that the FFX
mode natively supports. This happens before/after encryption/decryption. Each
character listed must appear only once. Number of characters must be in the
range [2, 95]. This must be encoded as ASCII. The order of characters does not
matter. The full list of allowed characters is:
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~!@#$%^&*()_-+=
[]|\:;"'<,>.?/
Corresponds to the JSON property
customAlphabet`
2143 2144 2145 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2143 def custom_alphabet @custom_alphabet end |
#radix ⇒ Fixnum
The native way to select the alphabet. Must be in the range [2, 95].
Corresponds to the JSON property radix
2148 2149 2150 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2148 def radix @radix end |
#surrogate_info_type ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2InfoType
Type of information detected by the API.
Corresponds to the JSON property surrogateInfoType
2153 2154 2155 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2153 def surrogate_info_type @surrogate_info_type end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
2160 2161 2162 2163 2164 2165 2166 2167 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2160 def update!(**args) @common_alphabet = args[:common_alphabet] if args.key?(:common_alphabet) @context = args[:context] if args.key?(:context) @crypto_key = args[:crypto_key] if args.key?(:crypto_key) @custom_alphabet = args[:custom_alphabet] if args.key?(:custom_alphabet) @radix = args[:radix] if args.key?(:radix) @surrogate_info_type = args[:surrogate_info_type] if args.key?(:surrogate_info_type) end |